Glossary
2-Step Verification (2SV)
Google's name for multi-factor authentication: a second step after the password, from codes and prompts to security keys and passkeys.
2-Step Verification (2SV) is Google's multi-factor authentication: after the password, the user proves possession of a second factor. That can be a code, a phone prompt, a security key or a passkey. Admins can enforce 2SV and require specific methods per organizational unit or group.
Not all methods are equal. Codes and prompts can be relayed by adversary-in-the-middle kits. Security keys and passkeys can't. In the logs, watch 2sv_disable and admin actions such as TURN_OFF_2_STEP_VERIFICATION. Attackers turn 2SV off to keep access.